Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2017-14170 | First vendor Publication | 2017-09-07 |
| Vendor | Cve | Last vendor Modification | 2021-01-04 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H | |||
|---|---|---|---|
| Overall CVSS Score | 6.5 | ||
| Base Score | 6.5 | Environmental Score | 6.5 |
| impact SubScore | 3.6 | Temporal Score | 6.5 |
| Exploitabality Sub Score | 2.8 | ||
| Attack Vector | Network | Attack Complexity | Low |
| Privileges Required | None | User Interaction | Required |
| Scope | Unchanged | Confidentiality Impact | None |
| Integrity Impact | None | Availability Impact | High |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:N/I:N/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.1 | Attack Range | Network |
| Cvss Impact Score | 6.9 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| In libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted MXF file, which claims a large "nb_index_entries" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU resources, since there is no EOF check inside the loop. Moreover, this big loop can be invoked multiple times if there is more than one applicable data segment in the crafted MXF file. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14170 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2019-01-08 | Name : The remote Debian host is missing a security update. File : debian_DLA-1630.nasl - Type : ACT_GATHER_INFO |
| 2017-10-16 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_ed73829daf6d11e7a633009c02a2ab30.nasl - Type : ACT_GATHER_INFO |
| 2017-10-11 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-3996.nasl - Type : ACT_GATHER_INFO |
| 2017-09-18 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2017-1067.nasl - Type : ACT_GATHER_INFO |
| 2017-09-18 | Name : The remote openSUSE host is missing a security update. File : openSUSE-2017-1068.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:58:01 |
|
| 2021-04-22 02:11:33 |
|
| 2021-01-05 00:22:44 |
|
| 2020-05-23 00:56:02 |
|
| 2019-10-03 09:20:05 |
|
| 2019-01-08 17:18:56 |
|
| 2017-11-04 09:23:48 |
|
| 2017-10-17 13:25:15 |
|
| 2017-10-12 13:34:41 |
|
| 2017-09-19 13:25:08 |
|
| 2017-09-13 09:23:36 |
|
| 2017-09-08 21:24:18 |
|
| 2017-09-07 12:02:45 |
|
